Orin
$ openssl s_client -connect mail.nasqueron.org:993 […] Verify return code: 10 (certificate has expired)
Certificate worked on SMTP and nginx server, but not IMAP.
And indeed, 4d9fcc57d6fc only took care to trigger postfix (SMTP) restart, not dovecot (IMAP).